Re: "It's a statistical thing."
"And reliable security researches have that access."
They may have that access, but closed-source shops tend to believe in security by obscurity, so an undiscovered bug isn't a bug at all... it's nothing. Even if the security researchers can be trusted and NDA'd to not disclose what they see, it still means things that were non-problems being turned into actual problems.
Biting the hand that feeds IT
